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DETAILED ACTION 

1. Applicant's amendment filed on March 31, 200-97 has been entered. 
Claims 1-43 are pending. 

Examiner's Amendment 

2. An examiner's amendment to the record appears below. Should the 
changes and/or additions be unacceptable to applicant, an amendment may be filed as 
provided by 37 CFR 1 .312. To ensure consideration of such an amendment, it MUST be 
submitted no later than the payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone 
Interview with Mr. Thomas Kelton on June 12, 2009. Applicant and/or applicant's 
representative have agreed to incorporate claims 10-11, 19, 29, and 43 into their 
independent claims and cancelled claims 10-11, 19, 29, and 43. Applicant and/or 
applicant's representative have also agreed for the examiner to amend the preamble of 
claim 13 to overcome the 101 Issue. If applicant disagrees with the correction, the 
applicant can file In the 312 amendment to make or revise the correction without 
changing the scope of the invention; otherwise, the 312 amendment will not be entered. 

CLAIMS: 

3. Please cancel claims 10-11,19, 29, and 43. 

4. Please replace claim 1 as follows : 

1. (Currently Amended) A system for providing protection against 
malicious code, said system comprising: 

a malicious code analyzer disposed in a communication system 
traffic pattern between an originator of an information communication of said 
communication system traffic pattern and an intended recipient of said information 
communication to intercept said information communication and to analyze said 
information communication for malicious code, said malicious code analyzer being 
configured to be transparent to systems of said communication system; 
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a steering module for said information communication between a 
first interface and a second interface of said system, wherein said steering module 
provides a translate function that monitors each information communication provided to 
said first interface and said second interface for information communication to be 
provided malicious code analvsis and directs at least some of said information 
communication to said malicious code analvzer: and 

a communications throttle for determining if said information 
communication is to be passed bv said svstem. 

5. Please replace claim 13 as follows : 

13. (Currently Amended) A computer program product having a 
computer readable medium having computer program logic recorded thereon , which 
when executed bv a machine, causes the machine to perform operations for providing 
protection against malicious code, said computer program product comprising: 

code for analyzing malicious code present in information 
communication traffic between an originator of an information communication of said 
communication traffic and an intended recipient of said information communication; 

code for a steering said information communication between 
interfaces associated with said information communication originator and said intended 
recipient and providing a translate function which detours at least a portion of said 
information communication to said code for analyzing malicious code and which renders 
said code for analyzing malicious code invisible to said information communication 
originator and said intended recipient; and 

code for throttling communications bv receiving information with 
respect to information communication and determining if said information 
communication is to be passed bv said interfaces. 

6. Please replace claim 20 as follows : 
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8. (Currently Amended) A method for providing protection against 
malicious code, said method comprising: 

intercepting packets in an information communication traffic pattern; 

steering said packets between interfaces associated with an 
information communication originator and said intended recipient, said steering 
providing detouring of at least a portion of said packets to a malicious code analyzer; 

analyzing said at least a portion of said packets by said malicious 
code analyzer before releasing said at least a portion of said packets back into said 
traffic pattern; and 

throttling communications by receiving information with respect to 
said packets and determining if said packets are to be passed in said traffic pattern. 

7. Please replace claim 30 as follows : 

30. (Currently Amended) A system for providing protection against 
malicious code, said system comprising: 

a steering module for directing packets between a first interface and a 
second interface of said system, wherein said steering module provides a translate 
function that monitors each packet provided to said first interface and said second 
interface for packets to be provided malicious code analysis and directs at least some of 
said packets to a malicious code analyzer; 

said malicious code analyzer coupled to said steering module for receiving 
packets which are not addressed for receipt by said malicious code analyzer but which 
are directed to said malicious code analyzer by said steering module and for providing 
packets analyzed by said malicious code analyzer to said steering module, wherein said 
malicious code analyzer provides a malicious code remediation function; and 

a communications throttle coupled to said steering module for receiving 
information with respect to packets which are not addressed for receipt by said 
communications throttle but which information with respect thereto is directed to said 
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communications throttle by said steering module and for determining if said packets are 
to be passed bv said system. 

Allowable Subject Matter 

8. Claims 1-9, 12-18, 20-28, and 30-42 are allowed. The following is an 
examiner's statement of reasons for allowance: Please see Interview Summary 
attached with this office action. 

Any comments considered necessary by applicant must be submitted no 
later than the payment of the issue fee and, to avoid processing delays, should 
preferably accompany the issue fee. Such submissions should be clearly labeled 
"Comments on Statement of Reasons for Allowance." 

Any comments considered necessary by applicant must be submitted no 
later than the payment of the issue fee and, to avoid processing delays, should 
preferably accompany the issue fee. Such submissions should be clearly labeled 
"Comments on Statement of Reasons for Allowance." 

Conclusion 

9. Any inquiry concerning this communication or earlier communications from 
the examiner should be directed to Thanhnga (Tanya) Truong whose telephone number 
is 571-272-3858. 

If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, Taghi Arani can be reached on 571-272-3787. The central fax 
number for the organization where this application or proceeding is assigned is 571- 
273-8300. 

Any inquiry of a general nature or relating to the status of this application 
or proceeding should be directed to the receptionist whose telephone number is 571- 
272-2100. 



/Thanhnga B. Truong/ 

Primary Examiner, Art Unit 2438 



Application/Control Number: 10/727,068 Page 6 

Art Unit: 2438 

TBT 

June 12, 2009 



